sqlmap is a penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a detection engine, many niche features, and a broad range of switches including database fingerprinting, data fetching from the database, and accessing the underlying file system and executing commands on the operating system via out-of-band connections.

SPT JCR Manager is a simple Web application used to view and manage Java Content Repositories. The application supports viewing the contents of a repository through a tree view, or through querying (XPath, SQL) or searching the entire repository. It supports CRUD operations on Nodes and properties (all standard types mandated by the specifications are supported).

Rakontu is a Web application that small groups of people can use together to share and work with their stories. It's for any group of people with stories to share and a reason to share them. Members build shared "story museums" that they can draw upon to achieve common goals like promoting a cause, learning from each other, and finding solutions to problems. It is based on ten years of research and practice in the field of organizational and community narrative and is a companion to the free e-book workingwithstories.org, which helps people use narrative techniques to help their communities and organizations. It uses questions, annotations, and links to organize and connect stories in more meaningful and useful ways than is possible in other social media applications. Other features such as safe storytelling via fictional attribution, the bridging of online and offline worlds, and fluid contribution roles are designed for the unique situation of people sharing stories for a reason.

GWiki is an embeddable Wiki engine. It allows users to edit rich text fragments in an application you develop. It supports I18N files and mulitimedia content. Gwiki can be extended with macros written in Java or Groovy. It has a powerful right and role system, which can be fed from external sources such as LDAP, and allows access to business entitiels from wiki pages. It comes with Wicket integration out-of-the-box. Wicket-HTML-Fragments can be held within GWiki, so these pages can be managed by the Wiki System, while Wicket handles the application logic. GWiki can be deployed as a servlet on every servlet container. GWiki can use a filesystem, a Zip archive, or a database for its content storage.

noVNC is a VNC client implemented using HTML5 technologies, specifically Canvas and WebSockets. It supports "wss://" encryption (SSL/TLS). For browsers that do not have native WebSockets support, the project includes web-socket-js, a WebSockets emulator using Adobe Flash. In addition, as3crypto has been added to web-socket-js to implement WebSocket SSL/TLS encryption, i.e. the "wss://" URI scheme.

httpforge is a set of shell tools that let you manipulate, send, receive, and analyze HTTP messages. These tools can be used to test, discover, and assert the security of Web servers, apps, and sites. An accompanying Python library is available for extensions.

Guau! Baby Log is a Web application that helps you take note of the important moments you wish or need to remember about the first months of the life of your baby. It has support for a photo gallery. It also hides all the information behind a password-protected account, away from the public eye.

Sukiyaki was born out of what the author sees as a much needed improvement to current imageboard/BBS software. They're flaky, often have security flaws that users take advantage of, and worst of all, they have the same UI from the mid-nineties. It's time for an update!
Sukiyaki visually organizes replies in threads so that it is clear who the reply is sent to. It is written using Django with its wonderful ORM, which helps reduce security vulnerabilities. It has been tested in production and is stable. It also includes a unique system for user-ranking of posts. Planned features include RSS updates for individual boards and threads, and there is a faster backend (Django-Treebeard).

Assignment Collector/Grader is a Web application for collecting and automatically grading student lab work. It automatically runs JUnit tests against student uploads, immediately provides feedback to students, records student results for later review, provides a gradesheet summary of student performance, allows easy administration of students, assignments, and classes, and allows the availability of an Assignment to be timed.

wger Workout Manager is a Web application that can manage your workouts, group them into schedules (A>B>C), and export them as PDFs or iCal files. It helps you keep a log of the weights lifted in the different exercises as well as your own body weight and can also create and manage your diet plans.